Martin Peylo

verify -crl_check_all requires separate CRL for self-signed certificate

3

This has been reproduced with OpenSSL 1.1.1a and a development build based on commit 13d928d3. The same issue has been rejected in #2873, while the correct argumentation might have been...

HTTP proxy option for OCSP and CRL download

1

HTTP proxy option does not yet work for OCSP and CRL download. This can be tested e.g. using the EJBCA quick-start instructions.

UTF-8 support for subject names

4

IRs specifying (e.g.) the following UTF-8 subject names on the command line don't bring the desired result. -subject "/CN=Martin/O=Test/L=北京" -subject "/CN=Martin/O=Test/L=öäü" Note: - using config files not yet evaluated -...